Remove Nyxem / Blackworm / Blackmal / KamaSutra virus

How to mitigate the effects of and remove Nyxem / Blackworm / Blackmal / KamaSutra virus

Software Applications:  BitDefender Enterprise Manager, BitDefender Internet Security, BitDefender Professional Plus, BitDefender Standard

Operating Systems:  Windows 2000, Windows 98, Windows Me, Windows NT, Windows XP

ISSUE:

The Win32.Nyxem.E virus is a mass mailer which will replace some of the user's data stored on the affected computers with the string "DATA Error [47 0F 94 93 F4 K5]". The virus is triggered on the third day of each month. This document describes ways to remove the virus and to prevent/minimize loss of user data on affected systems.

SOLUTION:

On the computers with BitDefender Update BitDefender to ensure you have the latest virus definitions installed. Scan the entire computer, selecting the options Move to quarantine or Delete as the first action option. Nyxem replaces the files with an irrelevant string, so keeping the files modified by the virus will not help you recover the lost data. On the computers without BitDefender Download the free removal tool  and run it to scan and clean your system. Use the BitDefender Scan Online  to scan and clean your system. On the computers without BitDefender do one of the following: User data safety instructions: Back up user data periodically to write-once storage media or to dedicated backup servers. The files with the extension .dmp, .doc, .mdb, .mde, .pdf, .pps, .ppt, .psd, .rar, .xls, or .zip are specifically threatened by the Nyxem virus and should therefore get priority in a backup.

Related Info:

Virus Encyclopedia: Win32.Nyxem.E@mm